$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8e36a5-76b0-3d6f-94a3-80f3d48d42ab.roa File: 7e8e36a5-76b0-3d6f-94a3-80f3d48d42ab.roa (raw, json) Hash identifier: uwEin7NzagjL8U0rCrJ+o8g9ji+yl8DS8XSGMQxeZMY= Subject key identifier: 73:AA:5F:B5:03:5B:09:0F:45:B6:7F:B1:20:A6:05:10:FC:40:EA:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8CF910E9F116B49CC5780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8e36a5-76b0-3d6f-94a3-80f3d48d42ab.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 76.129.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:cf:91:0e:9f:11:6b:49:cc:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0a289921-960a-4d10-8e8d-45a747b95969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:e6:91:b6:c2:ff:5d:51:16:30:62:1c:7e: 4f:5d:0f:5b:ff:93:c3:96:8e:5b:0b:74:a4:e5:13: 20:12:15:fe:1f:71:c3:fe:64:07:57:ac:d5:25:2c: 37:c7:0d:76:cb:fa:93:d3:53:90:a5:dc:f4:d4:c8: 17:8a:16:73:80:c6:a2:f8:b9:d9:cf:68:4d:5c:d9: 2b:b2:be:29:bb:6e:13:99:77:dc:98:38:a2:55:03: 74:f7:11:4a:3c:67:f3:08:61:5b:33:cc:ce:ac:d6: 63:64:bf:d5:ad:ea:df:0c:9a:15:5c:f1:89:8d:46: d6:fe:54:03:9e:9c:1b:bf:04:11:7b:32:75:3c:91: f5:59:1d:28:cc:89:e2:92:41:7a:5a:a5:3f:1e:39: 0f:62:63:d4:1d:32:59:7a:6c:36:63:ff:d9:4f:0d: a2:9f:1b:7b:b6:6c:6a:52:05:ae:a8:30:e1:db:dd: 47:2e:c8:81:5c:d8:12:94:eb:88:08:b7:91:d8:41: 22:4a:be:a9:fb:a3:93:16:80:47:44:67:d4:01:b2: 42:bd:ac:da:16:a3:ed:27:78:37:08:3c:fa:09:d2: 8c:92:a4:2f:ce:8b:9d:88:c4:bc:0f:d5:7d:46:7c: df:f9:77:dd:f1:27:5f:75:5b:5e:f7:1d:5d:4b:ac: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:5F:B5:03:5B:09:0F:45:B6:7F:B1:20:A6:05:10:FC:40:EA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8e36a5-76b0-3d6f-94a3-80f3d48d42ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:58:ad:95:73:5c:49:2f:76:0a:f8:31:fe:75:de:31:c5:f4: ca:12:a6:04:a5:11:ed:bf:2b:a4:70:e8:9a:8f:63:13:fd:01: a0:c0:7d:2f:9f:32:ae:77:4e:94:9a:cb:11:1a:d6:cb:70:bc: bd:a0:45:7f:9b:98:22:8c:b9:d6:4e:32:82:4c:ae:57:30:04: 77:0a:bd:1a:e4:ac:18:e9:b0:d1:d5:ff:ca:00:5f:24:f3:d4: b6:71:e4:40:fc:cb:a0:0c:49:2d:e3:61:3a:fa:84:ca:5e:1a: 9b:46:0a:57:b7:5f:d9:55:fb:bd:57:61:15:88:22:72:74:8e: 44:21:f4:3e:ab:62:d5:94:13:17:cc:1f:b8:b5:3c:b8:25:d4: ee:6b:df:5d:4d:72:3d:c8:d9:30:0a:34:2f:d0:f8:9b:96:37: 37:97:6f:83:4f:c3:63:62:79:64:fa:cd:96:ee:45:2f:e8:89: 0d:8a:e1:79:86:c9:e5:41:04:19:26:1c:9d:61:75:0c:98:45: 11:8d:b1:17:62:0b:13:df:85:26:18:94:3f:fb:a1:30:65:5c: 9a:55:2c:85:b4:b7:cf:23:d7:69:ec:95:2d:f7:39:b8:ae:5d: 21:29:19:a2:d0:aa:f5:28:e1:ef:10:ed:86:c3:e4:e0:04:98: 48:39:fc:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uM+RDp8Ra0nMV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGEyODk5MjEtOTYwYS00ZDEwLThlOGQtNDVhNzQ3Yjk1OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkefmkbbC/11RFjBiHH5PXQ9b/5PDlo5bC3Sk 5RMgEhX+H3HD/mQHV6zVJSw3xw12y/qT01OQpdz01MgXihZzgMai+LnZz2hNXNkr sr4pu24TmXfcmDiiVQN09xFKPGfzCGFbM8zOrNZjZL/VrerfDJoVXPGJjUbW/lQD npwbvwQRezJ1PJH1WR0ozInikkF6WqU/HjkPYmPUHTJZemw2Y//ZTw2inxt7tmxq UgWuqDDh291HLsiBXNgSlOuICLeR2EEiSr6p+6OTFoBHRGfUAbJCvazaFqPtJ3g3 CDz6CdKMkqQvzoudiMS8D9V9Rnzf+Xfd8SdfdVte9x1dS6x0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOqX7UDWwkPRbZ/sSCmBRD8QOoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U4ZTM2YTUtNzZiMC0z ZDZmLTk0YTMtODBmM2Q0OGQ0MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBYrZVzXEkvdgr4Mf513jHF9MoSpgSlEe2/K6Rw6JqPYxP9AaDAfS+f Mq53TpSayxEa1stwvL2gRX+bmCKMudZOMoJMrlcwBHcKvRrkrBjpsNHV/8oAXyTz 1LZx5ED8y6AMSS3jYTr6hMpeGptGCle3X9lV+71XYRWIInJ0jkQh9D6rYtWUExfM H7i1PLgl1O5r311Ncj3I2TAKNC/Q+JuWNzeXb4NPw2NieWT6zZbuRS/oiQ2K4XmG yeVBBBkmHJ1hdQyYRRGNsRdiCxPfhSYYlD/7oTBlXJpVLIW0t88j12nslS33Obiu XSEpGaLQqvUo4e8Q7YbD5OAEmEg5/Lc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:49 2025 by rpki-client